Title
Computational techniques for increasing PKI policy comprehension by human analysts
Abstract
Natural-language policies found in X.509 PKI describe an organization's stated policy as a set of requirements for trust. The widespread use of X.509 underscores the importance of understanding these requirements. Although many review processes are defined in terms of the semantic structure of these policies, human analysts are confined to working with page-oriented PDF texts. Our research accelerates PKI operations by enabling machines to translate between policy page numbers and policy reference structure. Adapting technologies supporting the analysis of Classical texts, we introduce two new tools. Our Vertical Variance Reporter helps analysts efficiently compare the reference structure of two policies. Our Citation-Aware HTML enables machines to process human-readable displays of policies in terms of this reference structure. We evaluate these contributions in terms of real-world feedback and observations from organizations that audit or accredit policies.
Year
DOI
Venue
2010
10.1145/1750389.1750396
IDtrust
Keywords
Field
DocType
pki policy comprehension,policy reference structure,natural-language policy,reference structure,stated policy,pki operation,accredit policy,semantic structure,computational technique,adapting technology,human analyst,policy page number,citation-aware html,pki,xml,natural language
Public key infrastructure,World Wide Web,Audit,XML,Computer science,Comprehension
Conference
Citations 
PageRank 
References 
1
0.36
6
Authors
3
Name
Order
Citations
PageRank
Gabriel A. Weaver1153.03
Scott A. Rea2222.97
Sean W. Smith31240205.10